File name	1e6835dd16644fed_shareddataevents
File size	3072 bytes
File type	SQLite 3.x database
MD5	378a7665e3b93ab4a5d391c9570de5ef
SHA1	bc7d619e372c0e60ecbbc7f5287940f931299af2
SHA256	1e6835dd16644fed56f923dde1a163f7ec88651ba3c5fa2b8a105184b852dc44
SHA512	f8ab74b3ad75e1ce6df927559c486d3f7219e5f50c3da2d69487a057c41c8c87663f0845c863a342852ec609f9516e695c4ebef21c64107a4072ffc82f8e6656
Ssdeep	12:HLS0qgtO9OiyopOz2VVXet3aQK+GyMFO+rlhurs7qllZ2BUI4h2:r8Rx/XYKQvGJF7ursClZy/4c
Yara	None matched
VirusTotal	Search for Analysis

File name	a479dd2807cb9817_ArmUI.ini
File size	163994 bytes
File type	Little-endian UTF-16 Unicode text, with CRLF line terminators
MD5	927e703153e62a1cb9a4437659144bda
SHA1	d293a6eb612b6c3bcddeec698e40dbebb5c61879
SHA256	a479dd2807cb9817ef3ef7a31f3b7582339785e921b4284e55a1387dc38ec770
SHA512	0a1d099fccceadb38c7326a9791da18ddeff069600359b415744ae46641b8f041e4a31b00281a996f54b0991dbdf7bdbd0701f6cb71189afd42c207c4631d228
Ssdeep	3072:kT4CJ4WTbmKk61NmSTBjDT7lV8MztutF4NVxcCXXYAF5CPD:9EYJ
Yara	None matched
VirusTotal	Search for Analysis

File name	62a31b817d5aa56b_adobearm.log
File size	3030 bytes
File type	ASCII text, with CRLF, CR line terminators
MD5	fb8657f7e4040a5e6e66bdd3ee25f3e7
SHA1	946b68187dd64d0bb6dc5080bceba206a2d6722a
SHA256	62a31b817d5aa56b4d187c0a8627b3076840bafe7ffa35fd7003e88a1b6492b3
SHA512	bcc7931997e4f0aa6bb2a579996acf1732b34172fdd4171b3dc2e7c14b9e9aae8a9ea6ab0bed64ab21ac48d8716e248687cab10759e5ba29e443d5eddce587d1
Ssdeep	48:ob17Q2eMbJ5d1rogAafH5L1XQmaI7Z5z1DkieM7t5T1mRf3JMCD1C1iqyeYRP:ob1kFmJ5d1sNsH5L1A1aZ5z1A52t5T1+
Yara	None matched
VirusTotal	Search for Analysis

File name	2a2e0ba33d793244_usercache.bin
File size	9662 bytes
File type	data
MD5	912bc7140ba3596f83450d830b7c9557
SHA1	0bae66884a3e091bd6095923d4add3984f3e8db2
SHA256	2a2e0ba33d79324445847a0128ca611fcc50c82a3556fa9a1478405f990843d2
SHA512	e9e45522441f2dfcfb2cd273be300a0b2add972c62f7496326a3fc5c45e4f318ca4d446ae2676360958429e39b91c1a7ee677a95d710d2936d5d48b1854dc3f1
Ssdeep	96:stIHhqWwdwlvw5SR73kAUVokJUJ0JMSJ81Wkhg28c1qOeN6hLWjAHo+1rOAq8oNs:sHWwdwlvwsR3UVoLpB+OeN6LWwTAAk8
Yara	None matched
VirusTotal	Search for Analysis

File name	cd45143589eed4aa_acecache10.lst
File size	1565 bytes
File type	data
MD5	751f3f26ad1d4baaa6c1b54a851f3ff1
SHA1	b0b1a2263c3688888eafcfca5fd54a1875f0d72b
SHA256	cd45143589eed4aadf9cb930280e99a59088589220addf1125bdfcf9e04db81a
SHA512	c858a2539544075bc6725149758c0e992003dad3ef8bc3486f3ec659ed6dbd326318d3f0f7fca77860bcd0791e1c9d3766dacb6cea4fe690ce536a8dc984051c
Ssdeep	24:ehkFwRfC0yJrZtkRlxFX5C0yJrC3l9XhqXbx8xqdXhqbFBC0yJrZWlV:e/Rq0yZOlY0y0l1heaoVhj0yalV
Yara	None matched
VirusTotal	Search for Analysis

Timestamp	Thread	Function	Arguments	Status	Return	Repeated

Timestamp	Thread	Function	Arguments	Status	Return	Repeated
2016-11-03 00:52:26.742461		LdrLoadDll	basename => kernel32 module_address => 0x7c800000 flags => 0 module_name => C:\WINDOWS\system32\kernel32.dll	SUCCESS
2016-11-03 00:52:26.902461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:26.912461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:26.942461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\AGM.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\AGM.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:26.942461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\AGM.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\AGM.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:26.982461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\CoolType.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\CoolType.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:26.982461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\CoolType.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\CoolType.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.002461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\BIB.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\BIB.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.002461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\BIB.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\BIB.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.002461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ACE.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ACE.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.002461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ACE.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ACE.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.022461		LdrLoadDll	basename => advapi32 module_address => 0x77dd0000 flags => 0 module_name => advapi32.dll	SUCCESS
2016-11-03 00:52:27.022461		LdrLoadDll	basename => kernel32 module_address => 0x7c800000 flags => 0 module_name => kernel32.dll	SUCCESS
2016-11-03 00:52:27.022461		LdrLoadDll	basename => advapi32 module_address => 0x77dd0000 flags => 0 module_name => advapi32.dll	SUCCESS
2016-11-03 00:52:27.022461		NtOpenFile	file_handle => 0x0000006c filepath => \Device\KsecDD desired_access => 0x00100001 filepath_r => \Device\KsecDD open_options => 16 status_info => 0 share_access => 7	SUCCESS
2016-11-03 00:52:27.022461		NtOpenFile	file_handle => 0x00000070 filepath => C:\WINDOWS\system32\wininet.dll desired_access => 0x001200a9 filepath_r => \??\C:\WINDOWS\system32\WININET.dll open_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.022461		NtOpenFile	file_handle => 0x00000000 filepath => C:\WINDOWS\system32\WININET.dll.123.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\WINDOWS\system32\WININET.dll.123.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.022461		NtOpenFile	file_handle => 0x00000000 filepath => C:\WINDOWS\system32\WININET.dll.123.Config desired_access => 0x001200a9 filepath_r => \??\C:\WINDOWS\system32\WININET.dll.123.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.022461		LdrLoadDll	basename => comctl32 module_address => 0x773d0000 flags => 0 module_name => comctl32.dll	SUCCESS
2016-11-03 00:52:27.073461		LdrLoadDll	basename => kernel32 module_address => 0x7c800000 flags => 0 module_name => kernel32.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => AcroRd32 module_address => 0x009f0000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.dll	SUCCESS
2016-11-03 00:52:27.083461		NtOpenFile	file_handle => 0x000000a0 filepath => C:\WINDOWS\system32\rpcss.dll desired_access => 0x00100020 filepath_r => \??\C:\WINDOWS\system32\rpcss.dll open_options => 96 status_info => 1 share_access => 5	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => uxtheme module_address => 0x5ad70000 flags => 0 module_name => C:\WINDOWS\system32\uxtheme.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => uxtheme module_address => 0x5ad70000 flags => 0 module_name => uxtheme.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => uxtheme module_address => 0x5ad70000 flags => 0 module_name => C:\WINDOWS\system32\uxtheme.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => uxtheme module_address => 0x5ad70000 flags => 0 module_name => C:\WINDOWS\system32\uxtheme.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => uxtheme module_address => 0x5ad70000 flags => 0 module_name => C:\WINDOWS\system32\uxtheme.dll	SUCCESS
2016-11-03 00:52:27.083461		LdrLoadDll	basename => Comctl32 module_address => 0x773d0000 flags => 0 module_name => Comctl32.dll	SUCCESS
2016-11-03 00:52:27.093461		LdrLoadDll	basename => kernel32 module_address => 0x7c800000 flags => 0 module_name => kernel32.dll	SUCCESS
2016-11-03 00:52:27.093461		LdrLoadDll	basename => BIB module_address => 0x07000000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\BIB.dll	SUCCESS
2016-11-03 00:52:27.103461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Esl\aiodlite.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Esl\aiodlite.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.113461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Esl\aiodlite.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Esl\aiodlite.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.113461		LdrLoadDll	basename => aiodlite module_address => 0x10000000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Esl\aiodlite.dll	SUCCESS
2016-11-03 00:52:27.113461		LdrLoadDll	basename => ADVAPI32 module_address => 0x77dd0000 flags => 0 module_name => C:\WINDOWS\system32\ADVAPI32.DLL	SUCCESS
2016-11-03 00:52:27.113461		LdrLoadDll	basename => ieframe module_address => 0x00000000 flags => 0 module_name => C:\WINDOWS\system32\ieframe.dll	FAILURE
2016-11-03 00:52:27.113461		LdrLoadDll	basename => acrord32 module_address => 0x009f0000 flags => 0 module_name => c:\program files\adobe\reader 9.0\reader\acrord32.dll	SUCCESS
2016-11-03 00:52:27.183461		LdrLoadDll	basename => UxTheme module_address => 0x5ad70000 flags => 0 module_name => UxTheme.dll	SUCCESS
2016-11-03 00:52:27.193461		NtOpenFile	file_handle => 0x000000b0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtOpenFile	file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtCreateFile	create_disposition => 2 file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe desired_access => 0x00100001 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe create_options => 16417 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtOpenFile	file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtCreateFile	create_disposition => 2 file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat desired_access => 0x00100001 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat create_options => 16417 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtOpenFile	file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtCreateFile	create_disposition => 2 file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0 desired_access => 0x00100001 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0 create_options => 16417 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtOpenFile	file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtOpenFile	file_handle => 0x000000bc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.283461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\UserCache.bin desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\UserCache.bin create_options => 100 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.303461		LdrLoadDll	basename => ole32 module_address => 0x774e0000 flags => 0 module_name => ole32.dll	SUCCESS
2016-11-03 00:52:27.313461		CoInitializeEx	options => 6	FAILURE
2016-11-03 00:52:27.313461		LdrLoadDll	basename => SHELL32 module_address => 0x7c9c0000 flags => 0 module_name => C:\WINDOWS\system32\SHELL32.dll	SUCCESS
2016-11-03 00:52:27.313461		LdrLoadDll	basename => SETUPAPI module_address => 0x77920000 flags => 0 module_name => SETUPAPI.dll	SUCCESS
2016-11-03 00:52:27.313461		LdrLoadDll	basename => rpcrt4 module_address => 0x77e70000 flags => 0 module_name => rpcrt4.dll	SUCCESS
2016-11-03 00:52:27.313461		NtCreateFile	create_disposition => 1 file_handle => 0x000000f8 filepath => \\?\PIPE\lsarpc desired_access => 0xc0100080 file_attributes => 0 filepath_r => \??\PIPE\lsarpc create_options => 64 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtWriteFile	buffer => H ¸¸ xW44Í«ï #Eg‰«]ˆŠëÉŸè+H` file_handle => 0x000000f8 offset => 0	SUCCESS
2016-11-03 00:52:27.313461		NtCreateFile	create_disposition => 1 file_handle => 0x000000f4 filepath => \\?\PIPE\lsarpc desired_access => 0xc0100080 file_attributes => 0 filepath_r => \??\PIPE\lsarpc create_options => 64 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtWriteFile	buffer => H ¸¸ xW44Í«ï #Eg‰«]ˆŠëÉŸè+H` file_handle => 0x000000f4 offset => 0	SUCCESS
2016-11-03 00:52:27.313461		NtOpenFile	file_handle => 0x000000fc filepath => \??\IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#42562d3131303066333036662020202020202020#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} desired_access => 0x00100080 filepath_r => \??\IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#42562d3131303066333036662020202020202020#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} open_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtOpenFile	file_handle => 0x000000fc filepath => \??\IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#42562d3131303066333036662020202020202020#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} desired_access => 0x00100080 filepath_r => \??\IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#42562d3131303066333036662020202020202020#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} open_options => 16 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtOpenFile	file_handle => 0x000000fc filepath => \??\STORAGE#Volume#1&30a96598&0&SignatureEBD7EBD7Offset7E00Length9FF2E4A00#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} desired_access => 0x00100080 filepath_r => \??\STORAGE#Volume#1&30a96598&0&SignatureEBD7EBD7Offset7E00Length9FF2E4A00#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} open_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.313461		NtOpenFile	file_handle => 0x000000fc filepath => \??\STORAGE#Volume#1&30a96598&0&SignatureEBD7EBD7Offset7E00Length9FF2E4A00#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} desired_access => 0x00100080 filepath_r => \??\STORAGE#Volume#1&30a96598&0&SignatureEBD7EBD7Offset7E00Length9FF2E4A00#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b} open_options => 16 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtCreateFile	create_disposition => 1 file_handle => 0x000000fc filepath => \??\MountPointManager desired_access => 0x00100080 file_attributes => 128 filepath_r => \??\MountPointManager create_options => 96 status_info => 0 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x00000100 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		LdrLoadDll	basename => SHELL32 module_address => 0x7c9c0000 flags => 0 module_name => SHELL32.dll	SUCCESS
2016-11-03 00:52:27.323461		LdrLoadDll	basename => ole32 module_address => 0x774e0000 flags => 0 module_name => ole32.dll	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		CoUninitialize		SUCCESS
2016-11-03 00:52:27.323461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Common Files\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		CoInitializeEx	options => 6	FAILURE
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x000000fc filepath => C:\Documents and Settings\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x000000fc filepath => C:\Documents and Settings\ardi\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.323461		NtOpenFile	file_handle => 0x000000fc filepath => C:\Documents and Settings\ardi\Local Settings\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		CoUninitialize		SUCCESS
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x000000fc filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeComFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeComFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.333461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.333461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\Reqrd\CMaps\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\Reqrd\CMaps\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x00000108 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.333461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.333461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Reqrd\CMaps\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Reqrd\CMaps\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.333461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.343461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.343461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.343461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.353461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.353461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.353461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.353461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.353461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.353461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.353461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeSysFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeSysFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.353461		LdrLoadDll	basename => gdi32 module_address => 0x77f10000 flags => 0 module_name => gdi32.dll	SUCCESS
2016-11-03 00:52:27.353461		LdrLoadDll	basename => advapi32 module_address => 0x77dd0000 flags => 0 module_name => advapi32.dll	SUCCESS
2016-11-03 00:52:27.733461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.733461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.733461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.733461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.733461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.733461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.733461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.733461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.733461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.733461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.733461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.743461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.743461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.743461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.743461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Acrobat\9.0\Cache\AcroFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:27.743461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:27.743461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.743461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.743461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.774461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.774461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.774461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.774461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.774461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.774461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.774461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.784461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.784461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.784461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.784461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.794461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.794461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.794461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.824461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.824461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.824461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.824461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.824461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.824461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.824461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.834461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.834461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.844461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.874461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.874461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.874461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.874461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.874461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.874461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.874461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.894461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.894461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.894461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.894461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.894461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.894461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.894461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.964461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.964461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.964461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.964461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.964461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.964461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.964461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.974461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.974461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.984461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.984461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtOpenFile	file_handle => 0x00000114 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:27.994461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:27.994461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000114 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\pfm\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\pfm\SY______.PFM create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000118 filepath => C:\Program Files\Common Files\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\pfm\SY______.PFM create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.004461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.004461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.004461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.014461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.014461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZX______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.024461		NtOpenFile	file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.024461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\mmm\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\mmm\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.034461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.034461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.034461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.054461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.054461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ZY______.PFB create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.054461		NtOpenFile	file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.054461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\mmm\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\mmm\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.064461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.064461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\SY______.PFM create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zx______.pfm create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\zy______.pfm create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.064461		NtOpenFile	file_handle => 0x000000fc filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.064461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeComFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeComFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.064461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:28.074461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\Reqrd\CMaps\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\Reqrd\CMaps\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000108 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\AdobeCMapFnt09.lst create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.074461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:28.074461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Reqrd\CMaps\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Reqrd\CMaps\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000108 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-H create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x00000118 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x00000118 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.074461		NtOpenFile	file_handle => 0x0000010c filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.074461		NtCreateFile	create_disposition => 1 file_handle => 0x0000010c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\Identity-V create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.084461		NtCreateFile	create_disposition => 5 file_handle => 0x000000fc filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\UserCache.bin desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\UserCache.bin create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:28.084461		NtWriteFile	buffer => 4 67 75FID.1:o: :F:ArialMTP:ArialL:$  "F:Arial#89FID.1:o: :F:Arial-ItalicMTP:Arial ItalicL:$ ÿ "F:Arial#85FID.1:o: :F:Arial-BoldMTP:Arial BoldL:$¼ "F:Arial#98FID.1:o: :F:Arial-BoldItalicMTP:Arial Bold ItalicL:$¼ÿ "F:Arial#91FID.1:o: :F:Arial-BlackP:Arial BlackL:-„ "F:Arial Black#95FID.1:o: :F:ComicSansMSP:Comic Sans MSL:-  BF:Comic Sans MS#105FID.1:o: :F:ComicSansMS-BoldP:Comic Sans MS BoldL:-¼ BF:Comic Sans MS#94FID.1:o: :F:CourierNewPSMTP:Courier NewL:$  1F:Courier New#108FID.1:o: :F:CourierNewPS-ItalicMTP:Courier New ItalicL:$ ÿ 1F:Courier New#104FID.1:o: :F:CourierNewPS-BoldMTP:Courier New BoldL:$¼ 1F:Courier New#117FID.1:o: :F:CourierNewPS-BoldItalicMTP:Courier New Bold ItalicL:$¼ÿ 1F:Courier New#84FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd.otf#92FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Oblique.otf#89FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-Bold.otf#96FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\CourierStd-BoldOblique.otf#108FID.1:o: :F:EstrangeloEdessaP:Estrangelo EdessaL:   BF:Estrangelo Edessa#123FID.1:o: :F:FranklinGothic-MediumP:Franklin Gothic MediumL:$  "F:Franklin Gothic Medium#136FID.1:o: :F:FranklinGothic-MediumItalicP:Franklin Gothic Medium ItalicL:$ ÿ "F:Franklin Gothic Medium#79FID.1:o: :F:GautamiP:GautamiL:8   F:Gautami#79FID.1:o: :F:GeorgiaP:GeorgiaL:$  F:Georgia#93FID.1:o: :F:Georgia-ItalicP:Georgia ItalicL:$ ÿ F:Georgia#89FID.1:o: :F:Georgia-BoldP:Georgia BoldL:$¼ F:Georgia#102FID.1:o: :F:Georgia-BoldItalicP:Georgia Bold ItalicL:$¼ÿ F:Georgia#76FID.1:o: :F:ImpactP:ImpactL:'   "F:Impact#73FID.1:o: :F:LathaP:LathaL:,  F:Latha#99FID.1:o: :F:LucidaConsoleP:Lucida ConsoleL:   1F:Lucida Console#113FID.1:o: :F:LucidaSansUnicodeP:Lucida Sans UnicodeL:1  "F:Lucida Sans Unicode#84FID.1:o: :F:Mangal-RegularP:MangalL:6  F:Mangal#79FID.1:o: :F:MarlettP:MarlettL: ô  F:Marlett#116FID.1:o: :F:MicrosoftSansSerifP:Microsoft Sans SerifL:$  "F:Microsoft Sans Serif#91FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Regular.otf#86FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-It.otf#88FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-Bold.otf#90FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MinionPro-BoldIt.otf#78FID.1:o: :F:MVBoliP:MV BoliL:4  F:MV Boli#96FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadCurrency-Regular.otf#91FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Regular.otf#86FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-It.otf#88FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-Bold.otf#90FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\MyriadPro-BoldIt.otf#114FID.1:o: :F:PalatinoLinotype-RomanP:Palatino LinotypeL:+  F:Palatino Linotype#122FID.1:o: :F:PalatinoLinotype-ItalicP:Palatino Linotype ItalicL:+ file_handle => 0x000000fc offset => 0	SUCCESS
2016-11-03 00:52:28.084461		NtWriteFile	buffer =>  ÿ F:Palatino Linotype#118FID.1:o: :F:PalatinoLinotype-BoldP:Palatino Linotype BoldL:+¼ F:Palatino Linotype#131FID.1:o: :F:PalatinoLinotype-BoldItalicP:Palatino Linotype Bold ItalicL:+¼ÿ F:Palatino Linotype#84FID.1:k: :P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\AdobePiStd.otf#73FID.1:o: :F:RaaviP:RaaviL:5  F:Raavi#76FID.1:o: :F:ShrutiP:ShrutiL:6  F:Shruti#79FID.1:o: :F:SylfaenP:SylfaenL:*   F:Sylfaen#149FID.1:k::P:C:\Program Files\Adobe\Reader 9.0\Resource\Font\SY______.PFBM:C:\Program Files\Adobe\Reader 9.0\Resource\Font\pfm\SY______.PFM#78FID.1:o: :F:SymbolMTP:SymbolL:'  F:Symbol#76FID.1:o: :F:TahomaP:TahomaL:'  "F:Tahoma#86FID.1:o: :F:Tahoma-BoldP:Tahoma BoldL:'¼ "F:Tahoma#105FID.1:o: :F:TimesNewRomanPSMTP:Times New RomanL:#   F:Times New Roman#119FID.1:o: :F:TimesNewRomanPS-ItalicMTP:Times New Roman ItalicL:#  ÿ F:Times New Roman#115FID.1:o: :F:TimesNewRomanPS-BoldMTP:Times New Roman BoldL:#¼ F:Times New Roman#128FID.1:o: :F:TimesNewRomanPS-BoldItalicMTP:Times New Roman Bold ItalicL:# ¼ÿ F:Times New Roman#93FID.1:o: :F:TrebuchetMSP:Trebuchet MSL:%  "F:Trebuchet MS#107FID.1:o: :F:TrebuchetMS-ItalicP:Trebuchet MS ItalicL:% ÿ "F:Trebuchet MS#103FID.1:o: :F:TrebuchetMS-BoldP:Trebuchet MS BoldL:%¼ "F:Trebuchet MS#114FID.1:o: :F:Trebuchet-BoldItalicP:Trebuchet MS Bold ItalicL:%¼ÿ "F:Trebuchet MS#81FID.1:o: :F:Tunga-RegularP:TungaL:5  F:Tunga#79FID.1:o: :F:VerdanaP:VerdanaL:'  "F:Verdana#93FID.1:o: :F:Verdana-ItalicP:Verdana ItalicL:' ÿ "F:Verdana#89FID.1:o: :F:Verdana-BoldP:Verdana BoldL:'¼ "F:Verdana#102FID.1:o: :F:Verdana-BoldItalicP:Verdana Bold ItalicL:'¼ÿ "F:Verdana#82FID.1:o: :F:WebdingsP:WebdingsL:   F:Webdings#93FID.1:o: :F:Wingdings-RegularP:WingdingsL:$  F:Wingdings#125 6 Symbol 0 48 6 Symbol 1 49 10 AdobePiStd 0 44 8 SymbolMT 1 49 12 Verdana-Bold 1 63 7 Verdana 1 61 5 Arial 1 0 7 ArialMT 1 0 7 Marlett 1 28 12 Arial-BoldMT 1 2 18 Arial-BoldItalicMT 1 3 14 Arial-ItalicMT 1 1 14 CourierNewPSMT 1 7 19 CourierNewPS-BoldMT 1 9 25 CourierNewPS-BoldItalicMT 1 10 17 TimesNewRomanPSMT 1 52 17 LucidaSansUnicode 1 26 13 LucidaConsole 1 25 22 TimesNewRomanPS-BoldMT 1 54 28 TimesNewRomanPS-BoldItalicMT 1 55 9 Wingdings 1 66 24 TimesNewRomanPS-ItalicMT 1 53 17 Wingdings-Regular 1 66 21 CourierNewPS-ItalicMT 1 8 21 PalatinoLinotype-Bold 1 42 7 Gautami 1 18 16 EstrangeloEdessa 1 15 5 Latha 1 24 20 Trebuchet-BoldItalic 1 59 18 TrebuchetMS-Italic 1 57 18 Verdana-BoldItalic 1 64 11 Arial-Black 1 4 11 ComicSansMS 1 5 14 Verdana-Italic 1 62 6 Impact 1 23 16 ComicSansMS-Bold 1 6 16 Arial,BoldItalic 1 3 10 ArialBlack 1 4 15 ComicSansMSBold 1 6 22 MyriadCurrency-Regular 0 35 14 MyriadPro-Bold 0 38 16 MyriadPro-BoldIt 0 39 12 MyriadPro-It 0 37 15 CourierStd-Bold 0 13 22 CourierStd-BoldOblique 0 14 18 CourierStd-Oblique 0 12 10 CourierStd 0 11 14 MinionPro-Bold 0 32 16 MinionPro-BoldIt 0 33 12 MinionPro-It 0 31 17 MinionPro-Regular 0 30 17 MyriadPro-Regular 0 36 12 Georgia-Bold 1 21 18 Georgia-BoldItalic 1 22 7 Georgia 1 19 21 FranklinGothic-Medium 1 16 22 PalatinoLinotype-Roman 1 40 27 FranklinGothic-MediumItalic 1 17 14 Georgia-Italic 1 20 6 MVBoli 1 34 6 Mangal 1 27 14 Mangal-Regular 1 27 5 Raavi 1 45 5 Tunga 1 60 13 Tunga-Regular 1 60 6 Shruti 1 46 7 Sylfaen 1 47 18 MicrosoftSa file_handle => 0x000000fc offset => 0	SUCCESS
2016-11-03 00:52:28.084461		NtWriteFile	buffer => nsSerif 1 29 23 PalatinoLinotype-Italic 1 41 6 Tahoma 1 50 27 PalatinoLinotype-BoldItalic 1 43 11 Tahoma-Bold 1 51 8 Webdings 1 65 11 TrebuchetMS 1 56 16 TrebuchetMS-Bold 1 58 11 ArialItalic 1 1 10 Arial,Bold 1 2 15 ArialBoldItalic 1 3 12 Arial,Italic 1 1 9 ArialBold 1 2 16 ComicSansMS,Bold 1 6 10 CourierNew 1 7 16 CourierNewItalic 1 8 17 CourierNew,Italic 1 8 14 CourierNewBold 1 9 15 CourierNew,Bold 1 9 20 CourierNewBoldItalic 1 10 21 CourierNew,BoldItalic 1 10 20 FranklinGothicMedium 1 16 26 FranklinGothicMediumItalic 1 17 27 FranklinGothicMedium,Italic 1 17 13 GeorgiaItalic 1 20 14 Georgia,Italic 1 20 11 GeorgiaBold 1 21 12 Georgia,Bold 1 21 17 GeorgiaBoldItalic 1 22 18 Georgia,BoldItalic 1 22 16 PalatinoLinotype 1 40 22 PalatinoLinotypeItalic 1 41 23 PalatinoLinotype,Italic 1 41 20 PalatinoLinotypeBold 1 42 21 PalatinoLinotype,Bold 1 42 26 PalatinoLinotypeBoldItalic 1 43 27 PalatinoLinotype,BoldItalic 1 43 10 TahomaBold 1 51 11 Tahoma,Bold 1 51 13 TimesNewRoman 1 52 19 TimesNewRomanItalic 1 53 20 TimesNewRoman,Italic 1 53 17 TimesNewRomanBold 1 54 18 TimesNewRoman,Bold 1 54 23 TimesNewRomanBoldItalic 1 55 24 TimesNewRoman,BoldItalic 1 55 17 TrebuchetMSItalic 1 57 18 TrebuchetMS,Italic 1 57 15 TrebuchetMSBold 1 58 16 TrebuchetMS,Bold 1 58 21 TrebuchetMSBoldItalic 1 59 22 TrebuchetMS,BoldItalic 1 59 13 VerdanaItalic 1 62 14 Verdana,Italic 1 62 11 VerdanaBold 1 63 12 Verdana,Bold 1 63 17 VerdanaBoldItalic 1 64 18 Verdana,BoldItalic 1 64 0000 file_handle => 0x000000fc offset => 0	SUCCESS
2016-11-03 00:52:28.084461		CoInitializeEx	options => 2	FAILURE
2016-11-03 00:52:28.084461		CoUninitialize		SUCCESS
2016-11-03 00:52:28.134461		LdrLoadDll	basename => mscms module_address => 0x73b30000 flags => 0 module_name => mscms.dll	SUCCESS
2016-11-03 00:52:28.154461		NtOpenFile	file_handle => 0x00000118 filepath => C:\WINDOWS\system32\spool\drivers\color\ desired_access => 0x00100001 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.154461		NtOpenFile	file_handle => 0x00000000 filepath => C:\WINDOWS\system32\Color\ desired_access => 0x00100001 filepath_r => \??\C:\WINDOWS\system32\Color\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.154461		NtCreateFile	create_disposition => 2 file_handle => 0x00000118 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ desired_access => 0x00100001 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ create_options => 16417 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:28.154461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst create_options => 96 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.154461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst open_options => 2113600 status_info => 4294967295 share_access => 7	FAILURE
2016-11-03 00:52:28.154461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst open_options => 2113600 status_info => 4294967295 share_access => 7	FAILURE
2016-11-03 00:52:28.154461		NtCreateFile	create_disposition => 5 file_handle => 0x00000118 filepath => C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst desired_access => 0x40100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Application Data\Adobe\Color\ACECache10.lst create_options => 96 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:28.154461		LdrLoadDll	basename => mscms module_address => 0x73b30000 flags => 0 module_name => mscms.dll	SUCCESS
2016-11-03 00:52:28.154461		NtOpenFile	file_handle => 0x0000011c filepath => C:\WINDOWS\system32\spool\drivers\color\ desired_access => 0x00100001 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.154461		NtCreateFile	create_disposition => 1 file_handle => 0x00000108 filepath => C:\WINDOWS\system32\spool\drivers\color\is330.icm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\is330.icm create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.174461		NtCreateFile	create_disposition => 1 file_handle => 0x00000108 filepath => C:\WINDOWS\system32\spool\drivers\color\kodak_dc.icm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\kodak_dc.icm create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.184461		NtCreateFile	create_disposition => 1 file_handle => 0x00000108 filepath => C:\WINDOWS\system32\spool\drivers\color\sRGB Color Space Profile.icm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\sRGB Color Space Profile.icm create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.184461		NtOpenFile	file_handle => 0x00000000 filepath => C:\WINDOWS\system32\Color\ desired_access => 0x00100001 filepath_r => \??\C:\WINDOWS\system32\Color\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.184461		NtWriteFile	buffer => CPSAÙjTdoogì C:\WINDOWS\System32\spool\DRIVERS\COLOR\is330.icm€sø’‘|ÿÿÿÿüÛ˜‘|(!‘|x=‘|0 ´s !¼c 0ܘ‘|@Š9üÜ!‘|¸ 9=‘|HŠ9sˆÜé|@‘|ÿÿÿÿ2‘|c‘| ±—|@‘|èŽ ØÛpÜÀÜé|@‘|ÿÿÿÿ¤Ü¬Ü˜‘|h3(xÝØrncs BGR baLÐTFSM|descRICOH RUSSIAN-SC 040402ÿþRICOH RUSSIAN-SC 040402RICOH RUSSIAN-SC 040402 ð8doog)C:\WINDOWS\System32\spool\DRIVERS\COLOR\kodak_dc.icmsø’‘|ÿÿÿÿüÛ˜‘|(!‘|x=‘|0 ´s !¼c 0ܘ‘|@Š9üÜ!‘|¸ 9=‘|HŠ9sˆÜé|@‘|ÿÿÿÿ2‘|c‘| ±—|@‘|èŽ ØÛpÜÀÜé|@‘|ÿÿÿÿ¤Ü¬Ü˜‘|h3(xÝØrtnm BGR baLÎ2TFSM¹descKODAK DC Series Digital Camera þÿKODAK DC Series Digital CameraKODAK DC Series Digital Camera ħdoogÜ C:\WINDOWS\System32\spool\DRIVERS\COLOR\sRGB Color Space Profile.icm˜‘|(!‘|x=‘|0 ´s !¼c 0ܘ‘|@Š9üÜ!‘|¸ 9=‘|HŠ9sˆÜé|@‘|ÿÿÿÿ2‘|c‘| ±—|@‘|èŽ ØÛpÜÀÜé|@‘|ÿÿÿÿ¤Ü¬Ü˜‘|h3(xÝØrtnm BGR ZYX TRCÎ 1TFSMldescsRGB IEC61966-2.1sRGB IEC61966-2.1 ?Ú.ÛJ‰«`¢<_|}ÝH file_handle => 0x00000118 offset => 0	SUCCESS
2016-11-03 00:52:28.204461		CoInitializeSecurity		SUCCESS
2016-11-03 00:52:28.204461		LdrLoadDll	basename => OLE32 module_address => 0x774e0000 flags => 0 module_name => OLE32	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		LdrLoadDll	basename => OLE32 module_address => 0x774e0000 flags => 0 module_name => OLE32.DLL	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.204461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.214461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.224461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.234461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.254461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.254461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.264461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.274461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.274461		NtOpenFile	file_handle => 0x00000134 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.344461		LdrLoadDll	basename => Annots.api module_address => 0x22100000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Annots.api	SUCCESS
2016-11-03 00:52:28.384461		LdrLoadDll	basename => Comctl32 module_address => 0x773d0000 flags => 0 module_name => Comctl32.dll	SUCCESS
2016-11-03 00:52:28.384461		LdrLoadDll	basename => ieframe module_address => 0x00000000 flags => 0 module_name => C:\WINDOWS\system32\ieframe.dll	FAILURE
2016-11-03 00:52:28.384461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtCreateFile	create_disposition => 2 file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ desired_access => 0x00100001 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ create_options => 16417 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\OfflineDocs desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\OfflineDocs create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtOpenFile	file_handle => 0x0000013c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.394461		NtCreateFile	create_disposition => 1 file_handle => 0x00000000 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\Workflows desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\Collab\Workflows create_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.424461		CoInitializeEx	options => 6	FAILURE
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\Documents and Settings\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\Documents and Settings\ardi\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\Documents and Settings\ardi\Application Data\desktop.ini desired_access => 0x80100000 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\desktop.ini open_options => 96 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\Documents and Settings\ardi\Application Data\desktop.ini desired_access => 0x80100000 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\desktop.ini open_options => 96 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:28.424461		NtOpenFile	file_handle => 0x00000144 filepath => C:\Documents and Settings\ardi\Application Data\desktop.ini desired_access => 0x80100000 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\desktop.ini open_options => 96 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:28.424461		CoUninitialize		SUCCESS
2016-11-03 00:52:28.434461		LdrLoadDll	basename => AcroRd32.exe module_address => 0x00400000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe	SUCCESS
2016-11-03 00:52:28.434461		LdrLoadDll	basename => AcroRd32.exe module_address => 0x00400000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe	SUCCESS
2016-11-03 00:52:28.444461		LdrLoadDll	basename => ieframe module_address => 0x00000000 flags => 0 module_name => C:\WINDOWS\system32\ieframe.dll	FAILURE
2016-11-03 00:52:28.444461		NtOpenFile	file_handle => 0x00000158 filepath => C:\Documents and Settings\ardi\Local Settings\Temp\ desired_access => 0x00100001 filepath_r => \??\C:\DOCUME~1\ardi\LOCALS~1\Temp\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.444461		NtCreateFile	create_disposition => 1 file_handle => 0x00000158 filepath => C:\Documents and Settings\ardi\Local Settings\Temp\IPR in China FINAL.pdf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\DOCUME~1\ardi\LOCALS~1\Temp\IPR in China FINAL.pdf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.444461		NtCreateFile	create_disposition => 1 file_handle => 0x00000158 filepath => C:\Documents and Settings\ardi\Local Settings\Temp\IPR in China FINAL.pdf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\DOCUME~1\ardi\LOCALS~1\Temp\IPR in China FINAL.pdf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.444461		NtOpenFile	file_handle => 0x00000158 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl desired_access => 0x00100020 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl open_options => 96 status_info => 1 share_access => 5	SUCCESS
2016-11-03 00:52:28.465461		NtCreateFile	create_disposition => 1 file_handle => 0x00000160 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl desired_access => 0x80100080 file_attributes => 0 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl create_options => 96 status_info => 1 share_access => 5	SUCCESS
2016-11-03 00:52:28.485461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.485461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.605461		LdrLoadDll	basename => ADMPlugin.apl module_address => 0x04000000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl	SUCCESS
2016-11-03 00:52:28.605461		LdrLoadDll	basename => ADMPlugin.apl module_address => 0x04000000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl	SUCCESS
2016-11-03 00:52:28.605461		LdrLoadDll	basename => ADMPlugin.apl module_address => 0x04000000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl	SUCCESS
2016-11-03 00:52:28.605461		LdrLoadDll	basename => UxTheme module_address => 0x5ad70000 flags => 0 module_name => UxTheme.dll	SUCCESS
2016-11-03 00:52:28.615461		LdrLoadDll	basename => uxTheme module_address => 0x5ad70000 flags => 0 module_name => uxTheme.dll	SUCCESS
2016-11-03 00:52:28.615461		LdrLoadDll	basename => Comctl32 module_address => 0x773d0000 flags => 0 module_name => Comctl32.dll	SUCCESS
2016-11-03 00:52:28.625461		LdrLoadDll	basename => Comctl32 module_address => 0x773d0000 flags => 0 module_name => Comctl32.dll	SUCCESS
2016-11-03 00:52:28.625461		NtOpenFile	file_handle => 0x00000168 filepath => C:\WINDOWS\system32 desired_access => 0x00100020 filepath_r => \??\C:\WINDOWS\system32 open_options => 33 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.655461		CoCreateInstance	class_context => 21 clsid => {b5f8350b-0548-48b1-a6ee-88bd00b4a5e7} iid => {6e26e776-04f0-495d-80e4-3330352e3169}	SUCCESS
2016-11-03 00:52:28.655461		NtOpenFile	file_handle => 0x000001dc filepath => C:\Documents and Settings\ardi\Local Settings\Temp desired_access => 0x00100020 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Temp open_options => 33 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.685461		LdrLoadDll	basename => UxTheme module_address => 0x5ad70000 flags => 0 module_name => UxTheme.dll	SUCCESS
2016-11-03 00:52:28.715461		LdrLoadDll	basename => Msftedit module_address => 0x4b400000 flags => 0 module_name => Msftedit.dll	SUCCESS
2016-11-03 00:52:28.725461		NtCreateFile	create_disposition => 1 file_handle => 0x000001e8 filepath => C:\Documents and Settings\ardi\Local Settings\Temp\IPR in China FINAL.pdf desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\DOCUME~1\ardi\LOCALS~1\Temp\IPR in China FINAL.pdf create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.745461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.745461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:28.745461		LdrLoadDll	basename => EScript.api module_address => 0x23800000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api	SUCCESS
2016-11-03 00:52:28.765461		LdrLoadDll	basename => ieframe module_address => 0x00000000 flags => 0 module_name => C:\WINDOWS\system32\ieframe.dll	FAILURE
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.775461		NtCreateFile	create_disposition => 1 file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\JSByteCodeWin.bin desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\JSByteCodeWin.bin create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.845461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.855461		NtOpenFile	file_handle => 0x000001f0 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.915461		LdrLoadDll	basename => mscms module_address => 0x73b30000 flags => 0 module_name => mscms.dll	SUCCESS
2016-11-03 00:52:28.915461		NtCreateFile	create_disposition => 1 file_handle => 0x000001f8 filepath => C:\WINDOWS\system32\spool\drivers\color\sRGB Color Space Profile.icm desired_access => 0x80100080 file_attributes => 0 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\sRGB Color Space Profile.icm create_options => 2144 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.915461		NtCreateFile	create_disposition => 1 file_handle => 0x000001f8 filepath => C:\WINDOWS\system32\spool\drivers\color\sRGB Color Space Profile.icm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\sRGB Color Space Profile.icm create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:28.965461		NtOpenFile	file_handle => 0x000001f8 filepath => C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\All Users\Application Data\Adobe\Acrobat\9.0\Replicate\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.085461		LdrLoadDll	basename => OLEAUT32 module_address => 0x77120000 flags => 0 module_name => OLEAUT32.dll	SUCCESS
2016-11-03 00:52:29.085461		NtOpenFile	file_handle => 0x00000204 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.085461		NtOpenFile	file_handle => 0x00000204 filepath => C:\Documents and Settings\ desired_access => 0x00100001 filepath_r => \??\C:\DOCUME~1\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.085461		NtOpenFile	file_handle => 0x00000204 filepath => C:\Documents and Settings\ardi\ desired_access => 0x00100001 filepath_r => \??\C:\DOCUME~1\ardi\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.085461		NtOpenFile	file_handle => 0x00000204 filepath => C:\Documents and Settings\ardi\Local Settings\ desired_access => 0x00100001 filepath_r => \??\C:\DOCUME~1\ardi\LOCALS~1\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.095461		NtOpenFile	file_handle => 0x00000208 filepath => C:\ desired_access => 0x00100001 filepath_r => \??\C:\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.095461		NtOpenFile	file_handle => 0x00000208 filepath => C:\Documents and Settings\ardi\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.095461		NtOpenFile	file_handle => 0x00000208 filepath => C:\Documents and Settings\ardi\Local Settings\Temp\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Local Settings\Temp\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:29.166461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\BIBUtils.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\BIBUtils.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:29.166461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\BIBUtils.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\BIBUtils.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:29.176461		LdrLoadDll	basename => BIBUtils module_address => 0x10000000 flags => 0 module_name => BIBUtils.dll	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.168461		NtOpenFile	file_handle => 0x0000021c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.188461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\sqlite.dll.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\sqlite.dll.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:31.188461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\sqlite.dll.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\sqlite.dll.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:31.188461		LdrLoadDll	basename => sqlite module_address => 0x02ef0000 flags => 0 module_name => sqlite.dll	SUCCESS
2016-11-03 00:52:31.188461		NtCreateFile	create_disposition => 3 file_handle => 0x00000220 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 2 share_access => 3	SUCCESS
2016-11-03 00:52:31.188461		NtCreateFile	create_disposition => 3 file_handle => 0x00000224 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.188461		NtWriteFile	buffer => ÙÕù ¡cתÕ© file_handle => 0x00000224 offset => 0	SUCCESS
2016-11-03 00:52:31.198461		NtWriteFile	buffer => file_handle => 0x00000224 offset => 0	SUCCESS
2016-11-03 00:52:31.198461		NtWriteFile	buffer => SQLite format 3 @  €ì€j'' tableversion_tableversion_tableCREATE TABLE version_table ( version INTEGER NOT NULL PRIMARY KEY )‚ ## ƒitablepref_eventspref_eventsCREATE TABLE pref_events (event_id INTEGER NOT NULL PRIMARY KEY, event_time INTEGER NOT NULL, instance_guid TEXT NOT NULL, section_name TEXT NOT NULL, pref_key TEXT, pref_value TEXT, client_nonce INTEGER NOT NULL, added INTEGER NOT NULL ) file_handle => 0x00000220 offset => 0	SUCCESS
2016-11-03 00:52:31.198461		NtWriteFile	buffer =>  file_handle => 0x00000220 offset => 0	SUCCESS
2016-11-03 00:52:31.198461		NtWriteFile	buffer => üü file_handle => 0x00000220 offset => 0	SUCCESS
2016-11-03 00:52:31.218461		NtOpenFile	file_handle => 0x00000224 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.218461		NtOpenFile	file_handle => 0x00000230 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.218461		CoInitializeEx	options => 2	FAILURE
2016-11-03 00:52:31.218461		CoUninitialize		SUCCESS
2016-11-03 00:52:31.218461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.218461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.218461		NtCreateFile	create_disposition => 3 file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.218461		NtCreateFile	create_disposition => 3 file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.218461		NtWriteFile	buffer => ÙÕù ¡c×h} ¾ file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.218461		NtWriteFile	buffer =>  file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.218461		NtWriteFile	buffer =>  file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => h} ¾ file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => SQLite format 3 @  €ì€j'' tableversion_tableversion_tableCREATE TABLE version_table ( version INTEGER NOT NULL PRIMARY KEY )‚ ## ƒitablepref_eventspref_eventsCREATE TABLE pref_events (event_id INTEGER NOT NULL PRIMARY KEY, event_time INTEGER NOT NULL, instance_guid TEXT NOT NULL, section_name TEXT NOT NULL, pref_key TEXT, pref_value TEXT, client_nonce INTEGER NOT NULL, added INTEGER NOT NULL ) file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => h}! file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x0000023c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x0000023c filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16385 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer =>  file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x00000240 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => SQLite format 3 @  €ì€j'' tableversion_tableversion_tableCREATE TABLE version_table ( version INTEGER NOT NULL PRIMARY KEY )‚ ## ƒitablepref_eventspref_eventsCREATE TABLE pref_events (event_id INTEGER NOT NULL PRIMARY KEY, event_time INTEGER NOT NULL, instance_guid TEXT NOT NULL, section_name TEXT NOT NULL, pref_key TEXT, pref_value TEXT, client_nonce INTEGER NOT NULL, added INTEGER NOT NULL ) file_handle => 0x00000234 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtWriteFile	buffer => ¸¸F M) X'ß78907a3535e95647a93bc3a2ca4b705bAVGeneralLastExitNormal file_handle => 0x00000234 offset => 0	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x00000240 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.228461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.228461		NtCreateFile	create_disposition => 3 file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.239461		NtWriteFile	buffer => ÙÕù ¡c×M#ê file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.239461		NtWriteFile	buffer => ÙÕù ¡c×Ë@ file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.239461		NtWriteFile	buffer => ÙÕù ¡c×Ðȵ‚ file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtCreateFile	create_disposition => 3 file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0xc0100080 file_attributes => 128 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal create_options => 96 status_info => 2 share_access => 0	SUCCESS
2016-11-03 00:52:31.239461		NtWriteFile	buffer => ÙÕù ¡c×ÞØR, file_handle => 0x00000238 offset => 0	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000244 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.239461		NtOpenFile	file_handle => 0x00000244 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000238 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal desired_access => 0x00010080 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\SharedDataEvents-journal open_options => 2113600 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.249461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.299461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ desired_access => 0x00100001 filepath_r => \??\C:\Documents and Settings\ardi\Application Data\Adobe\Acrobat\9.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.299461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.299461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.299461		NtOpenFile	file_handle => 0x00000234 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\JavaScripts\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:31.459461		LdrLoadDll	basename => Wtsapi32 module_address => 0x76f50000 flags => 0 module_name => Wtsapi32.dll	SUCCESS
2016-11-03 00:52:32.000461		NtCreateFile	create_disposition => 1 file_handle => 0x00000244 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Annots.api desired_access => 0x80100080 file_attributes => 0 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Annots.api create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:32.380461		NtCreateFile	create_disposition => 1 file_handle => 0x00000244 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api desired_access => 0x80100080 file_attributes => 0 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\EScript.api create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000244 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap open_options => 16385 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:34.012461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x0000024c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont open_options => 16385 status_info => 4294967295 share_access => 7	FAILURE
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000248 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x0000024c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font open_options => 16385 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:34.012461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000254 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000254 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\Font\PFM\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CIDFont\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts open_options => 16385 status_info => 4294967295 share_access => 7	FAILURE
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000250 filepath => C:\Program Files\Common Files\Adobe\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000254 filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap open_options => 16385 status_info => 1 share_access => 7	SUCCESS
2016-11-03 00:52:34.012461		LdrLoadDll	basename => shell32 module_address => 0x7c9c0000 flags => 0 module_name => shell32.dll	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x0000025c filepath => C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Resource\CMap\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:34.012461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Common Files\Adobe\Fonts\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\Fonts\ open_options => 16417 status_info => 4294967295 share_access => 3	FAILURE
2016-11-03 00:52:40.732461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api.2.Manifest desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api.2.Manifest open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:40.732461		NtOpenFile	file_handle => 0x00000000 filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api.2.Config desired_access => 0x001200a9 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api.2.Config open_options => 96 status_info => 4294967295 share_access => 1	FAILURE
2016-11-03 00:52:40.732461		LdrLoadDll	basename => Updater.api module_address => 0x30800000 flags => 0 module_name => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api	SUCCESS
2016-11-03 00:52:40.762461		NtOpenFile	file_handle => 0x00000258 filepath => C:\Program Files\Common Files\Adobe\ARM\1.0\ desired_access => 0x00100001 filepath_r => \??\C:\Program Files\Common Files\Adobe\ARM\1.0\ open_options => 16417 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:52:40.802461		CreateProcessInternalW	thread_identifier => 1964 thread_handle => 0x000002ac process_identifier => 1972 current_directory => C:\Documents and Settings\ardi\Local Settings\Temp filepath => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe track => 1 command_line => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" /PRODUCT:Reader /VERSION:9.0 /MODE:2 filepath_r => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe creation_flags => 67109904 process_handle => 0x000002a8 inherit_handles => 0	SUCCESS
2016-11-03 00:52:40.802461		ShellExecuteExW	parameters => /PRODUCT:Reader /VERSION:9.0 /MODE:2 filepath => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" filepath_r => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" show_type => 10	SUCCESS
2016-11-03 00:52:41.423461		NtCreateFile	create_disposition => 1 file_handle => 0x000002ac filepath => C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api desired_access => 0x80100080 file_attributes => 0 filepath_r => \??\C:\Program Files\Adobe\Reader 9.0\Reader\plug_ins\Updater.api create_options => 96 status_info => 1 share_access => 1	SUCCESS
2016-11-03 00:52:50.346461		NtCreateFile	create_disposition => 1 file_handle => 0x000002a8 filepath => C:\WINDOWS\system32\spool\drivers\color\sRGB Color Space Profile.icm desired_access => 0x80100080 file_attributes => 128 filepath_r => \??\C:\WINDOWS\System32\spool\DRIVERS\COLOR\sRGB Color Space Profile.icm create_options => 96 status_info => 1 share_access => 3	SUCCESS
2016-11-03 00:53:28.210461		NtDelayExecution	skipped => 0 milliseconds => 60000	SUCCESS
2016-11-03 00:53:43.773461		NtDelayExecution	skipped => 0 milliseconds => 1	SUCCESS
2016-11-03 00:53:58.524461		LdrLoadDll	basename => msimg32 module_address => 0x76380000 flags => 0 module_name => msimg32.dll	SUCCESS